This policy provides guidelines to enhance cybersecurity awareness while traveling. It aims to mitigate the risks associated with using digital devices and accessing networks during travel, ensuring the protection of sensitive company data and maintaining overall security.

As part of our commitment to safeguarding information, we use the https://freedomhouse.org/explore-the-map?type=fiw&year=2024 as a guideline to identify high-risk countries. Team members should exercise heightened caution when traveling to or accessing networks in these regions. The map provides an overview of freedom and risk levels, helping us to take appropriate measures in areas where cybersecurity threats may be more prevalent.

General security considerations

• Mobile Device Risks: Mobile devices are prime targets for theft, potentially exposing sensitive information.
• High-Risk Individuals: Those in senior positions or handling valuable information are at higher risk of targeting.
• Threat Actor Capabilities:
  • Identify and target mobile devices.
  • Deliver malicious code.
  • Exploit network connections (Wi-Fi, Bluetooth).
  • Infect other networks.
  • Track location via GPS.
  • Activate device microphones.
  • Intercept electronic communications.
• Privacy Assumptions: Assume no expectation of privacy in public areas like offices, hotels, and Internet cafes, especially in countries listed as partly free or not free: https://freedomhouse.org/explore-the-map?type=fiw&year=2024.

Security of portable and mobile devices

Phones/Smartphones:

• Password Protection: Enable a password meeting organizational complexity requirements.
• Ownership Display: Show ownership information on the device.
• Data Erase Settings: Enable settings to erase data after multiple invalid login attempts.
• Anti-Theft Options: Consider enabling self-locating and anti-theft software.
• Physical Security: Keep the device with you; if not possible, remove the battery, memory expansion, and SIM cards.
• Bluetooth: Disable when not in use.
• Charging Precautions: Avoid charging via unknown or untrusted USB ports.

Tablets/Laptops:

• Password Protection: Enable and regularly change the password.
• Antivirus: Update antivirus software before traveling.